Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection
Vulnerability Description
The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_poll AJAX action. While the result is not disclosed in the response, it is possible to use a timing attack to exfiltrate data such as password hash.
CVSS Information
N/A
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
WordPress 插件 SQL注入漏洞
Vulnerability Description
WordPress 插件是WordPress开源的一个应用插件。 WordPress 插件 Poll Maker WordPress 中存在SQL注入漏洞，该漏洞源于产品的ays_finish_poll请求未对输入数据做有效验证。攻击者可通过该漏洞获取密码散列等数据。以下产品及版本受到影响：WordPress Plugin Poll Maker WordPress 3.4.2之前版本。
CVSS Information
N/A
Vulnerability Type
N/A